Auditing database systems through forensic analysis